Services non-authenticated CNA list endpoint.

[jdalphond-mitre]

It has been requested that we create a registry org endpoint that returns all "Active" CNA's in the JSON format that CVE.org uses.

[{ "shortName": "", "cnaID": "", "organizationName": "", "scope": "", "contact": [ { "email": [], "contact": [], "form": [] } ], "disclosurePolicy": [ { "label": "Policy", "language": "", "url": "" } ], "securityAdvisories": { "alerts": [], "advisories": [ { "label": "Advisories", "url": "" } ] }, "resources": [], "CNA": { "isRoot": false, "root": { "shortName": "n/a", "organizationName": "n/a" }, "type": [ "N/A" ], "TLR": { "shortName": "n/a", "organizationName": "n/a" }, "roles": [ { "helpText": "", "role": "CNA" } ] }, "country": "" }]

[jdalphond-mitre]

Organizations can be Root, Secretariat, CNA, Bulk Download, ADP.

Filter everything out but Root and CNA.

Off of 2.8.5
CNAs have a flag that says whether it is "Last Resort" (CNA-LR)
Roots have a flag that says whether it is "Top Level" (Top Level Root)

isRoot = authority contains root